Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2007-2772

5 documents4 sources
Severity
7.8HIGH
EPSS
39.7%
top 2.69%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
CA Brightstor Arcserve Backup
Timeline
PublishedMay 21
Latest updateMay 1

Description

(1) caloggerd.exe (camt70.dll) and (2) mediasvr.exe (catirpc.dll and rwxdr.dll) in CA BrightStor Backup 11.5.2.0 SP2 allow remote attackers to cause a denial of service (NULL dereference and application crash) via a crafted RPC packet.

CVSS vector

AV:N/AC:L/C:N/I:N/A:CExploitability: 10.0 | Impact: 6.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-wx6x-cx9j-ghxj: (1) caloggerd↗2022-05-01
▶
CVEList
CVE-2007-2772: (1) caloggerd↗2007-05-21
▶

💥Exploits & PoCs

2
Exploit-DB
CA BrightStor Backup 11.5.2.0 - 'Mediasvr.exe' Denial of Service↗2007-05-16
▶
Exploit-DB
CA BrightStor Backup 11.5.2.0 - 'caloggderd.exe' Denial of Service↗2007-05-16
▶